b56d1e5235c5527099f6b18c82f13e117acda7d01288c989552bd1d079947a88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b56d1e5235c5527099f6b18c82f13e117acda7d01288c989552bd1d079947a88
Size

9KB
MD5

bdf7dfb03b6dde56141534a468c2d662
SHA1

8f51963a503108887f7dc3ba9197cbc3b425fec8
SHA256

b56d1e5235c5527099f6b18c82f13e117acda7d01288c989552bd1d079947a88
SHA512

636562dc4e7c938f5b3968080cfffa3ac13855fd2bcd63651ce2c3101535b83bd005fd1887aa130c1d55be328968a41e6b5463936ad15d0028a4c97d981d26b7
SSDEEP

192:2jLvomKpbUTt4XNi0xGPIm111l6gO8jOIob6zdUnXE+Oxs+k2yhp:g6bUO9TxGV1ygDdwUzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b56d1e5235c5527099f6b18c82f13e117acda7d01288c989552bd1d079947a88

Files

b56d1e5235c5527099f6b18c82f13e117acda7d01288c989552bd1d079947a88
.dll windows:5 windows x86 arch:x86

bab287abd34888be50035187199a1350

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteFile
Sleep
ReadFile
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
GetTempPathA
CreateThread

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ